Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/3e7e0fab-71e5-3b42-92d2-4d997f177ad4.roa
File:                     3e7e0fab-71e5-3b42-92d2-4d997f177ad4.roa (raw, json)
Hash identifier:          hSn2opmBgfUKmulJiYelyeWmmN/Jz66l8Qdq/ZN+ymA=
Subject key identifier:   92:80:7A:F0:8F:1A:D0:36:EA:D8:89:22:24:38:B0:17:7C:BC:3D:90
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285845462428F46B24A49DB90A8A3A
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/3e7e0fab-71e5-3b42-92d2-4d997f177ad4.roa
Signing time:             Wed 20 Mar 2024 20:45:31 +0000
ROA not before:           Wed 20 Mar 2024 20:45:31 +0000
ROA not after:            Tue 18 Jun 2024 20:45:31 +0000
asID:                     36492
IP address blocks:        136.23.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:24:28:f4:6b:24:a4:9d:b9:0a:8a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:45:31 2024 GMT
            Not After : Jun 18 20:45:31 2024 GMT
        Subject: CN=c14d41fa-b307-4e43-8646-246e6f6dce76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4d:de:a1:6e:70:91:5f:d7:ee:0c:5f:31:ac:
                    62:bb:70:d8:99:10:c2:59:a4:c9:e4:c0:ab:95:6e:
                    53:bd:12:eb:d1:cf:d1:f1:86:d1:ca:4a:8c:44:c5:
                    cc:ea:bc:7b:7c:41:00:c9:3c:be:f4:cb:6f:05:ed:
                    92:10:f1:d4:5a:dc:19:dd:24:40:58:f1:9e:52:5b:
                    12:72:f7:ed:ab:6f:b5:f4:de:67:9b:52:ac:66:c6:
                    6f:22:06:b7:43:4a:81:de:b8:32:af:26:e4:b9:61:
                    78:04:8e:e6:68:1e:07:83:13:fd:4c:41:2e:d8:13:
                    0a:38:a6:96:9b:f0:8f:6e:94:d5:6f:79:e8:ba:c4:
                    bd:a3:42:91:30:1b:1d:b1:42:6b:a3:7c:40:9c:b9:
                    62:9b:17:15:39:e8:b6:c0:a0:d3:33:7b:f1:c6:ac:
                    f5:65:dd:f0:1c:5d:35:f1:2a:89:71:10:07:5c:9a:
                    14:07:66:ac:47:85:11:77:c5:99:83:a2:5d:75:2d:
                    de:07:4a:4e:d2:64:13:49:fa:0c:9f:05:46:72:b5:
                    95:34:4d:9d:ef:c6:26:ab:5f:01:e2:a8:78:d4:57:
                    d5:9e:5c:d9:ed:8a:af:c1:2c:2c:91:8a:07:d7:05:
                    b0:e7:bd:85:ad:52:dd:ed:42:9c:d9:93:c6:5c:91:
                    90:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:80:7A:F0:8F:1A:D0:36:EA:D8:89:22:24:38:B0:17:7C:BC:3D:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/3e7e0fab-71e5-3b42-92d2-4d997f177ad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:62:47:f1:fb:38:36:6e:fc:28:bf:49:e3:a8:b4:d7:85:71:
         d8:29:48:da:dc:7c:12:a8:3b:10:47:3d:81:af:68:03:09:2c:
         09:17:95:0d:5d:cb:42:24:39:ba:94:0c:1a:e7:77:46:30:0e:
         5f:96:ad:3d:f5:07:d1:a0:23:8c:4d:d7:9a:f0:fb:ff:59:09:
         48:59:76:21:c3:56:6f:73:d6:92:92:df:04:18:60:f3:bc:be:
         af:c8:7c:cd:f1:22:0b:c1:75:21:0e:38:64:55:b0:19:93:bb:
         11:25:13:74:11:88:df:0d:e5:7c:99:c5:cd:02:41:1a:b9:43:
         27:ce:20:13:ab:94:87:41:e8:b1:c6:dc:54:4e:66:c2:32:56:
         95:4f:21:ab:f8:09:79:b3:98:af:1a:f3:f1:49:2c:c3:eb:47:
         c0:09:ca:18:e2:a5:b3:f2:87:69:98:f0:18:95:16:5f:e7:20:
         7f:b9:02:40:2f:6f:e8:25:8e:8f:b2:44:94:9e:7f:e4:df:5d:
         03:4a:0e:f1:06:73:8c:a2:b6:6e:57:30:11:e1:2a:32:30:4d:
         ae:f0:d8:ae:bb:82:a1:df:23:cf:4e:30:16:71:65:28:da:b0:
         d6:e8:1e:7b:55:a4:58:32:94:e7:05:99:45:8a:87:35:28:c0:
         53:7b:c8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:27:53 2024 by rpki-client on console-fra.rpki-client.org